Privacy Policy

1. Introduction

MatchMode Company (شركة ماتش مود), a Limited Liability Company (LLC) registered in the Kingdom of Saudi Arabia under Commercial Registration No. 7053037433 (“MatchMode”, “we”, “us”, or “our”), is committed to protecting the privacy and security of your personal data. This Privacy Policy (“Policy”) explains how we collect, use, store, share, and protect your personal data when you use the MatchMode mobile application (the “App”).

This Policy is drafted in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia (Royal Decree No. M/19 of 2021, as amended by Royal Decree No. M/148 of 2023), its Implementing Regulations, the Regulation on Personal Data Transfer Outside the Kingdom, and all applicable guidelines issued by the Saudi Data and Artificial Intelligence Authority (SDAIA). This Policy also complies with the E-Commerce Law (Royal Decree No. M/126 of 2019) and the Anti-Cyber Crime Law (Royal Decree No. M/17 of 2007).

By using the App, you consent to the collection, use, and processing of your personal data as described in this Policy. If you do not agree with this Policy, please do not use the App.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register for an account, create a player profile, book a match, or communicate through the App, we collect:

• Identity Data: Full name, date of birth, age.
• Contact Data: Email address, phone number.
• Physical Profile Data: Height, weight, football skill level, preferred playing position, and other football-related profile information.
• Account Data: Username, password (stored in encrypted form), account preferences.
• Communication Data: Messages sent through in-app community chat features.

3.2 Data Collected Automatically

• Location Data: GPS coordinates and approximate location, used to show nearby pitches and relevant match opportunities. Collected only when you grant permission.
• Device Data: Device type, operating system version, unique device identifiers, and app version.
• Usage Data: Information about how you interact with the App, including pages viewed, features used, match history, and booking activity.

3.3 Payment Data

Payment transactions are processed by our authorized payment service provider, PayTabs, via Apple Pay. MatchMode does not directly collect, store, or have access to your full payment card details. We receive only transaction confirmation data, including the transaction amount, date, and a reference number.

4. Legal Basis for Processing

Under the PDPL, we process your personal data based on:

• Consent: You provide explicit consent when you create an account. For users aged 13-17, parental or guardian consent is required.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and MatchMode.
• Legitimate Interest: Processing is necessary for our legitimate interests, such as improving the App, preventing fraud, and ensuring security.
• Legal Obligation: Processing is necessary to comply with our legal obligations under Saudi law.

5. How We Use Your Personal Data

• To create and manage your account and player profile.
• To facilitate the booking of football matches and process payments.
• To match you with suitable games and players based on your profile, location, and preferences.
• To enable communication between users through in-app features.
• To share relevant player and booking information with pitch owners/operators for venue management and security purposes.
• To send you important service-related notifications, including booking confirmations, match updates, and account alerts.
• To improve, personalize, and optimize the App and our services.
• To detect, prevent, and address fraud, abuse, security issues, and technical problems.
• To comply with legal obligations and respond to lawful requests from authorities.
• To send promotional communications, only with your prior explicit consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

6.1 Pitch Owners and Operators

When you book a match at a participating venue, we share relevant booking and player information with the pitch owner/operator. This is necessary for venue management, security, and to facilitate the delivery of the service.

6.2 Other Users

Certain profile information (such as your name, skill level, and playing position) may be visible to other users who are part of the same match or who view your public profile.

6.3 Service Providers

• PayTabs: Our payment service provider, licensed by the Saudi Central Bank (SAMA).
• Apple: Apple Pay is used as a payment method.
• Supabase: Our cloud database and backend infrastructure provider. Data is currently hosted on servers in the United States (see Section 7).

6.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required by law, in response to valid legal process, or to protect the rights, property, or safety of MatchMode, our users, or the public.

7. Cross-Border Data Transfers

Your personal data is stored on servers operated by Supabase, currently located in the United States. In accordance with the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom, we ensure that such transfers are conducted with appropriate safeguards, including contractual safeguards and risk assessments.

By using the App, you acknowledge and consent to the transfer of your personal data to the United States for processing and storage. We are actively working to provide data hosting options within the Kingdom of Saudi Arabia or the GCC region.

8. Data Retention

• Account Data: Retained for the duration of your active account plus 12 months following account deletion.
• Booking and Transaction Data: Retained for a minimum of 5 years, as required by Saudi commercial and tax laws.
• Communication Data: Retained for the duration of your active account and deleted within 90 days of account termination.
• Location Data: Processed in real-time and not stored beyond what is necessary.

9. Your Rights Under the PDPL

As a data subject under the PDPL, you have the following rights:

• Right to be Informed: Know what personal data we hold about you and why.
• Right of Access: Request access to your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal exceptions.
• Right to Restrict Processing: Request restriction of processing in certain circumstances.
• Right to Object: Object to processing for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at matchmodefounders@gmail.com. We will respond within 30 days. If unsatisfied, you may lodge a complaint with SDAIA.

10. Data Security

We implement appropriate technical and organizational measures including:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest.
• Access controls restricting data access to authorized personnel.
• Regular security assessments and vulnerability testing.
• Secure authentication mechanisms for user accounts.

11. Children's Privacy

The App is available to users aged 13 and above. For users between 13 and 18, we require parental or guardian consent. If we become aware that we have collected data from a child under 13 without verified parental consent, we will immediately delete such data.

Parents and guardians may contact us at matchmodefounders@gmail.com to review, modify, or request deletion of their child's personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email. Your continued use of the App after any changes constitutes acceptance of the updated Policy.

13. Contact Information